Unable to customize provided DSC images

[aitorcelaya]

I am trying to use the Dataspace Connector repository provided images and then mounting on them to avoid having to clone the source code. I have looked at the deployment examples (https://github.com/International-Data-Spaces-Association/IDS-Deployment-Examples/tree/main/dataspace-connector), but none of them refer to the application.properties. I am struggling to define the locally installed TLS which is different from the keystore defined in config.json.

I have been able to define the local DAPS and I am successfully obtaining the tokens. How would I go about defining a TLS certificate?

Environment 1

This is my docker-compose.yml:

version: '3.5'

services:
  connectora:
    image: ghcr.io/international-data-spaces-association/dataspace-connector:7.0.2
    container_name: connectora
    ports:
      - 8080:8080
    networks:
      - default
    volumes:
      - ./dataspaceconnectora/conf:/conf
    environment:
      - CONFIGURATION_PATH=/conf/config.json  
      - DAPS.URL=http://omejdn:4567
      - DAPS.TOKEN.URL=http://omejdn:4567/token  
      - SERVER.SSL.ENABLED=true
#      - SERVER.SSL.KEY-STORE-TYPE=PKCS12
#      - SERVER.SSL.KEY-STORE=/conf/connectorA.p12
#      - SERVER.SSL.KEY-STORE-PASSWORD=password
#      - SERVER.SSL.KEY-ALIAS=1      
    restart: always
        
networks:
  default:
    external:
      name: broker-localhost_default 

These are the logs I am getting if I do not mention the TLS. It takes the pre-defined keystore-localhost.p12.

connectora  | 2022-03-24T15:57:39,267 [https-jsse-nio-8080-exec-2] INFO - Init duration for springdoc-openapi is: 8235 ms
connectora  | 2022-03-24T15:58:30,462 [https-jsse-nio-8080-exec-3] INFO - Successfully received DAT from DAPS.
connectora  | 2022-03-24T15:58:30,711 [https-jsse-nio-8080-exec-3] INFO - Using cached DAPS DAT. [expiration=(2022-03-24T16:58:30.000+0000)]
connectora  | 2022-03-24T15:58:30,889 [https-jsse-nio-8080-exec-3] INFO - Sending request to https://connectora:8080/api/ids/data ...
connectora  | 2022-03-24T15:58:31,186 [https-jsse-nio-8080-exec-3] WARN - Message handling or processing failed. [exception=(Hostname connectora not verified:\n    certificate: sha256/KgnokG5h8UUUzN0oU2/4v1Fh9m6xoMr9pLOAHv8438U=\n    DN: CN=localhost, OU=Unknown, O=Unknown, L=Unknown, ST=Unknown, C=Unknown\n    subjectAltNames: [127.0.0.1, localhost])]
connectora  | javax.net.ssl.SSLPeerUnverifiedException: Hostname connectora not verified:
connectora  |     certificate: sha256/KgnokG5h8UUUzN0oU2/4v1Fh9m6xoMr9pLOAHv8438U=
connectora  |     DN: CN=localhost, OU=Unknown, O=Unknown, L=Unknown, ST=Unknown, C=Unknown
connectora  |     subjectAltNames: [127.0.0.1, localhost]
connectora  |   at okhttp3.internal.connection.RealConnection.connectTls(RealConnection.kt:389) ~[okhttp-4.9.3.jar:?]
connectora  |   at okhttp3.internal.connection.RealConnection.establishProtocol(RealConnection.kt:337) ~[okhttp-4.9.3.jar:?]
connectora  |   at okhttp3.internal.connection.RealConnection.connect(RealConnection.kt:209) ~[okhttp-4.9.3.jar:?]
connectora  |   at okhttp3.internal.connection.ExchangeFinder.findConnection(ExchangeFinder.kt:226) ~[okhttp-4.9.3.jar:?]
connectora  |   at okhttp3.internal.connection.ExchangeFinder.findHealthyConnection(ExchangeFinder.kt:106) ~[okhttp-4.9.3.jar:?]
connectora  |   at okhttp3.internal.connection.ExchangeFinder.find(ExchangeFinder.kt:74) ~[okhttp-4.9.3.jar:?]
connectora  |   at okhttp3.internal.connection.RealCall.initExchange$okhttp(RealCall.kt:255) ~[okhttp-4.9.3.jar:?]
connectora  |   at okhttp3.internal.connection.ConnectInterceptor.intercept(ConnectInterceptor.kt:32) ~[okhttp-4.9.3.jar:?]
connectora  |   at okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.kt:109) ~[okhttp-4.9.3.jar:?]
connectora  |   at okhttp3.internal.cache.CacheInterceptor.intercept(CacheInterceptor.kt:95) ~[okhttp-4.9.3.jar:?]
connectora  |   at okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.kt:109) ~[okhttp-4.9.3.jar:?]
connectora  |   at okhttp3.internal.http.BridgeInterceptor.intercept(BridgeInterceptor.kt:83) ~[okhttp-4.9.3.jar:?]
connectora  |   at okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.kt:109) ~[okhttp-4.9.3.jar:?]
connectora  |   at okhttp3.internal.http.RetryAndFollowUpInterceptor.intercept(RetryAndFollowUpInterceptor.kt:76) ~[okhttp-4.9.3.jar:?]
connectora  |   at okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.kt:109) ~[okhttp-4.9.3.jar:?]
connectora  |   at de.fraunhofer.ids.messaging.core.config.ClientProvider$EncodingInterceptor.intercept(ClientProvider.java:484) ~[core-6.0.1.jar:?]
connectora  |   at okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.kt:109) ~[okhttp-4.9.3.jar:?]
connectora  |   at okhttp3.internal.connection.RealCall.getResponseWithInterceptorChain$okhttp(RealCall.kt:201) ~[okhttp-4.9.3.jar:?]
connectora  |   at okhttp3.internal.connection.RealCall.execute(RealCall.kt:154) ~[okhttp-4.9.3.jar:?]
connectora  |   at de.fraunhofer.ids.messaging.protocol.http.IdsHttpService.sendRequest(IdsHttpService.java:396) ~[messaging-6.0.1.jar:?]
connectora  |   at de.fraunhofer.ids.messaging.protocol.http.IdsHttpService.send(IdsHttpService.java:237) ~[messaging-6.0.1.jar:?]
connectora  |   at de.fraunhofer.ids.messaging.protocol.http.IdsHttpService.sendAndCheckDat(IdsHttpService.java:499) ~[messaging-6.0.1.jar:?]
connectora  |   at io.dataspaceconnector.service.message.builder.type.base.AbstractMessageService.send(AbstractMessageService.java:112) [classes/:7.0.2]
connectora  |   at io.dataspaceconnector.service.message.builder.type.DescriptionRequestService.sendMessage(DescriptionRequestService.java:94) [classes/:7.0.2]
connectora  |   at io.dataspaceconnector.controller.message.ids.DescriptionRequestMessageController.sendMessage(DescriptionRequestMessageController.java:132) [classes/:7.0.2]
connectora  |   at io.dataspaceconnector.controller.message.ids.DescriptionRequestMessageController$$FastClassBySpringCGLIB$$ba843bd6.invoke(<generated>) [classes/:7.0.2]
connectora  |   at org.springframework.cglib.proxy.MethodProxy.invoke(MethodProxy.java:218) [spring-core-5.3.15.jar:5.3.15]
connectora  |   at org.springframework.aop.framework.CglibAopProxy$CglibMethodInvocation.invokeJoinpoint(CglibAopProxy.java:783) [spring-aop-5.3.15.jar:5.3.15]
connectora  |   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:163) [spring-aop-5.3.15.jar:5.3.15]
connectora  |   at org.springframework.aop.framework.CglibAopProxy$CglibMethodInvocation.proceed(CglibAopProxy.java:753) [spring-aop-5.3.15.jar:5.3.15]
connectora  |   at org.springframework.security.access.intercept.aopalliance.MethodSecurityInterceptor.invoke(MethodSecurityInterceptor.java:61) [spring-security-core-5.6.1.jar:5.6.1]
connectora  |   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:186) [spring-aop-5.3.15.jar:5.3.15]
connectora  |   at org.springframework.aop.framework.CglibAopProxy$CglibMethodInvocation.proceed(CglibAopProxy.java:753) [spring-aop-5.3.15.jar:5.3.15]
connectora  |   at org.springframework.aop.framework.CglibAopProxy$DynamicAdvisedInterceptor.intercept(CglibAopProxy.java:698) [spring-aop-5.3.15.jar:5.3.15]
connectora  |   at io.dataspaceconnector.controller.message.ids.DescriptionRequestMessageController$$EnhancerBySpringCGLIB$$b5e96992.sendMessage(<generated>) [classes/:7.0.2]
connectora  |   at jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[?:?]
connectora  |   at jdk.internal.reflect.NativeMethodAccessorImpl.invoke(Unknown Source) ~[?:?]
connectora  |   at jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source) ~[?:?]
connectora  |   at java.lang.reflect.Method.invoke(Unknown Source) ~[?:?]
connectora  |   at org.springframework.web.method.support.InvocableHandlerMethod.doInvoke(InvocableHandlerMethod.java:205) [spring-web-5.3.15.jar:5.3.15]
connectora  |   at org.springframework.web.method.support.InvocableHandlerMethod.invokeForRequest(InvocableHandlerMethod.java:150) [spring-web-5.3.15.jar:5.3.15]
connectora  |   at org.springframework.web.servlet.mvc.method.annotation.ServletInvocableHandlerMethod.invokeAndHandle(ServletInvocableHandlerMethod.java:117) [spring-webmvc-5.3.15.jar:5.3.15]
connectora  |   at org.springframework.web.servlet.mvc.method.annotation.RequestMappingHandlerAdapter.invokeHandlerMethod(RequestMappingHandlerAdapter.java:895) [spring-webmvc-5.3.15.jar:5.3.15]
connectora  |   at org.springframework.web.servlet.mvc.method.annotation.RequestMappingHandlerAdapter.handleInternal(RequestMappingHandlerAdapter.java:808) [spring-webmvc-5.3.15.jar:5.3.15]
connectora  |   at org.springframework.web.servlet.mvc.method.AbstractHandlerMethodAdapter.handle(AbstractHandlerMethodAdapter.java:87) [spring-webmvc-5.3.15.jar:5.3.15]
connectora  |   at org.springframework.web.servlet.DispatcherServlet.doDispatch(DispatcherServlet.java:1067) [spring-webmvc-5.3.15.jar:5.3.15]
connectora  |   at org.springframework.web.servlet.DispatcherServlet.doService(DispatcherServlet.java:963) [spring-webmvc-5.3.15.jar:5.3.15]
connectora  |   at org.springframework.web.servlet.FrameworkServlet.processRequest(FrameworkServlet.java:1006) [spring-webmvc-5.3.15.jar:5.3.15]
connectora  |   at org.springframework.web.servlet.FrameworkServlet.doPost(FrameworkServlet.java:909) [spring-webmvc-5.3.15.jar:5.3.15]
connectora  |   at javax.servlet.http.HttpServlet.service(HttpServlet.java:681) [tomcat-embed-core-9.0.56.jar:4.0.FR]
connectora  |   at org.springframework.web.servlet.FrameworkServlet.service(FrameworkServlet.java:883) [spring-webmvc-5.3.15.jar:5.3.15]
connectora  |   at javax.servlet.http.HttpServlet.service(HttpServlet.java:764) [tomcat-embed-core-9.0.56.jar:4.0.FR]
connectora  |   at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:227) [tomcat-embed-core-9.0.56.jar:9.0.56]
connectora  |   at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:162) [tomcat-embed-core-9.0.56.jar:9.0.56]
connectora  |   at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:53) [tomcat-embed-websocket-9.0.56.jar:9.0.56]
connectora  |   at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:189) [tomcat-embed-core-9.0.56.jar:9.0.56]
connectora  |   at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:162) [tomcat-embed-core-9.0.56.jar:9.0.56]
connectora  |   at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:327) [spring-security-web-5.6.1.jar:5.6.1]
connectora  |   at org.springframework.security.web.access.intercept.FilterSecurityInterceptor.invoke(FilterSecurityInterceptor.java:115) [spring-security-web-5.6.1.jar:5.6.1]
connectora  |   at org.springframework.security.web.access.intercept.FilterSecurityInterceptor.doFilter(FilterSecurityInterceptor.java:81) [spring-security-web-5.6.1.jar:5.6.1]
connectora  |   at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:336) [spring-security-web-5.6.1.jar:5.6.1]
connectora  |   at org.springframework.security.web.access.ExceptionTranslationFilter.doFilter(ExceptionTranslationFilter.java:122) [spring-security-web-5.6.1.jar:5.6.1]
connectora  |   at org.springframework.security.web.access.ExceptionTranslationFilter.doFilter(ExceptionTranslationFilter.java:116) [spring-security-web-5.6.1.jar:5.6.1]
connectora  |   at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:336) [spring-security-web-5.6.1.jar:5.6.1]
connectora  |   at org.springframework.security.web.session.SessionManagementFilter.doFilter(SessionManagementFilter.java:126) [spring-security-web-5.6.1.jar:5.6.1]
connectora  |   at org.springframework.security.web.session.SessionManagementFilter.doFilter(SessionManagementFilter.java:81) [spring-security-web-5.6.1.jar:5.6.1]
connectora  |   at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:336) [spring-security-web-5.6.1.jar:5.6.1]
connectora  |   at org.springframework.security.web.authentication.AnonymousAuthenticationFilter.doFilter(AnonymousAuthenticationFilter.java:109) [spring-security-web-5.6.1.jar:5.6.1]
connectora  |   at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:336) [spring-security-web-5.6.1.jar:5.6.1]
connectora  |   at org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter.doFilter(SecurityContextHolderAwareRequestFilter.java:149) [spring-security-web-5.6.1.jar:5.6.1]
connectora  |   at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:336) [spring-security-web-5.6.1.jar:5.6.1]
connectora  |   at org.springframework.security.web.savedrequest.RequestCacheAwareFilter.doFilter(RequestCacheAwareFilter.java:63) [spring-security-web-5.6.1.jar:5.6.1]
connectora  |   at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:336) [spring-security-web-5.6.1.jar:5.6.1]
connectora  |   at org.springframework.security.web.authentication.www.BasicAuthenticationFilter.doFilterInternal(BasicAuthenticationFilter.java:181) [spring-security-web-5.6.1.jar:5.6.1]
connectora  |   at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:117) [spring-web-5.3.15.jar:5.3.15]
connectora  |   at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:336) [spring-security-web-5.6.1.jar:5.6.1]
connectora  |   at org.springframework.security.web.authentication.logout.LogoutFilter.doFilter(LogoutFilter.java:103) [spring-security-web-5.6.1.jar:5.6.1]
connectora  |   at org.springframework.security.web.authentication.logout.LogoutFilter.doFilter(LogoutFilter.java:89) [spring-security-web-5.6.1.jar:5.6.1]
connectora  |   at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:336) [spring-security-web-5.6.1.jar:5.6.1]
connectora  |   at org.springframework.security.web.header.HeaderWriterFilter.doHeadersAfter(HeaderWriterFilter.java:90) [spring-security-web-5.6.1.jar:5.6.1]
connectora  |   at org.springframework.security.web.header.HeaderWriterFilter.doFilterInternal(HeaderWriterFilter.java:75) [spring-security-web-5.6.1.jar:5.6.1]
connectora  |   at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:117) [spring-web-5.3.15.jar:5.3.15]
connectora  |   at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:336) [spring-security-web-5.6.1.jar:5.6.1]
connectora  |   at org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:110) [spring-security-web-5.6.1.jar:5.6.1]
connectora  |   at org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:80) [spring-security-web-5.6.1.jar:5.6.1]
connectora  |   at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:336) [spring-security-web-5.6.1.jar:5.6.1]
connectora  |   at org.springframework.security.web.context.request.async.WebAsyncManagerIntegrationFilter.doFilterInternal(WebAsyncManagerIntegrationFilter.java:55) [spring-security-web-5.6.1.jar:5.6.1]
connectora  |   at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:117) [spring-web-5.3.15.jar:5.3.15]
connectora  |   at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:336) [spring-security-web-5.6.1.jar:5.6.1]
connectora  |   at org.springframework.security.web.FilterChainProxy.doFilterInternal(FilterChainProxy.java:211) [spring-security-web-5.6.1.jar:5.6.1]
connectora  |   at org.springframework.security.web.FilterChainProxy.doFilter(FilterChainProxy.java:183) [spring-security-web-5.6.1.jar:5.6.1]
connectora  |   at org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:354) [spring-web-5.3.15.jar:5.3.15]
connectora  |   at org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:267) [spring-web-5.3.15.jar:5.3.15]
connectora  |   at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:189) [tomcat-embed-core-9.0.56.jar:9.0.56]
connectora  |   at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:162) [tomcat-embed-core-9.0.56.jar:9.0.56]
connectora  |   at org.springframework.web.filter.RequestContextFilter.doFilterInternal(RequestContextFilter.java:100) [spring-web-5.3.15.jar:5.3.15]
connectora  |   at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:117) [spring-web-5.3.15.jar:5.3.15]
connectora  |   at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:189) [tomcat-embed-core-9.0.56.jar:9.0.56]
connectora  |   at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:162) [tomcat-embed-core-9.0.56.jar:9.0.56]
connectora  |   at org.springframework.web.filter.FormContentFilter.doFilterInternal(FormContentFilter.java:93) [spring-web-5.3.15.jar:5.3.15]
connectora  |   at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:117) [spring-web-5.3.15.jar:5.3.15]
connectora  |   at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:189) [tomcat-embed-core-9.0.56.jar:9.0.56]
connectora  |   at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:162) [tomcat-embed-core-9.0.56.jar:9.0.56]
connectora  |   at org.springframework.boot.actuate.metrics.web.servlet.WebMvcMetricsFilter.doFilterInternal(WebMvcMetricsFilter.java:96) [spring-boot-actuator-2.6.3.jar:2.6.3]
connectora  |   at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:117) [spring-web-5.3.15.jar:5.3.15]
connectora  |   at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:189) [tomcat-embed-core-9.0.56.jar:9.0.56]
connectora  |   at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:162) [tomcat-embed-core-9.0.56.jar:9.0.56]
connectora  |   at org.springframework.web.filter.CharacterEncodingFilter.doFilterInternal(CharacterEncodingFilter.java:201) [spring-web-5.3.15.jar:5.3.15]
connectora  |   at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:117) [spring-web-5.3.15.jar:5.3.15]
connectora  |   at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:189) [tomcat-embed-core-9.0.56.jar:9.0.56]
connectora  |   at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:162) [tomcat-embed-core-9.0.56.jar:9.0.56]
connectora  |   at io.opentracing.contrib.web.servlet.filter.TracingFilter.doFilter(TracingFilter.java:189) [opentracing-web-servlet-filter-0.4.0.jar:?]
connectora  |   at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:189) [tomcat-embed-core-9.0.56.jar:9.0.56]
connectora  |   at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:162) [tomcat-embed-core-9.0.56.jar:9.0.56]
connectora  |   at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:197) [tomcat-embed-core-9.0.56.jar:9.0.56]
connectora  |   at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:97) [tomcat-embed-core-9.0.56.jar:9.0.56]
connectora  |   at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:540) [tomcat-embed-core-9.0.56.jar:9.0.56]
connectora  |   at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:135) [tomcat-embed-core-9.0.56.jar:9.0.56]
connectora  |   at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:92) [tomcat-embed-core-9.0.56.jar:9.0.56]
connectora  |   at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:78) [tomcat-embed-core-9.0.56.jar:9.0.56]
connectora  |   at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:357) [tomcat-embed-core-9.0.56.jar:9.0.56]
connectora  |   at org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:382) [tomcat-embed-core-9.0.56.jar:9.0.56]
connectora  |   at org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:65) [tomcat-embed-core-9.0.56.jar:9.0.56]
connectora  |   at org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:895) [tomcat-embed-core-9.0.56.jar:9.0.56]
connectora  |   at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1732) [tomcat-embed-core-9.0.56.jar:9.0.56]
connectora  |   at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49) [tomcat-embed-core-9.0.56.jar:9.0.56]
connectora  |   at org.apache.tomcat.util.threads.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1191) [tomcat-embed-core-9.0.56.jar:9.0.56]
connectora  |   at org.apache.tomcat.util.threads.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:659) [tomcat-embed-core-9.0.56.jar:9.0.56]
connectora  |   at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61) [tomcat-embed-core-9.0.56.jar:9.0.56]
connectora  |   at java.lang.Thread.run(Unknown Source) [?:?]
connectora  | 2022-03-24T15:58:33,246 [scheduling-1] INFO - Scanning agreements...

[aitorcelaya]

Environment 2

This is my docker-compose.yml:

version: '3.5'

services:
  connectora:
    image: ghcr.io/international-data-spaces-association/dataspace-connector:7.0.2
    container_name: connectora
    ports:
      - 8080:8080
    networks:
      - default
    volumes:
      - ./dataspaceconnectora/conf:/conf
    environment:
      - CONFIGURATION_PATH=/conf/config.json  
      - DAPS.URL=http://omejdn:4567
      - DAPS.TOKEN.URL=http://omejdn:4567/token  
      - SERVER.SSL.ENABLED=true
#      - SERVER.SSL.KEY-STORE-TYPE=PKCS12
      - SERVER.SSL.KEY-STORE=/conf/connectorA.p12
#      - SERVER.SSL.KEY-STORE-PASSWORD=password
#      - SERVER.SSL.KEY-ALIAS=1      
    restart: always
        
networks:
  default:
    external:
      name: broker-localhost_default 

These are the logs I am getting with the setup above:

connectora  | 2022-03-24T16:00:53,046 [scheduling-1] INFO - Scanning agreements...
connectora  | 2022-03-24T16:01:02,488 [https-jsse-nio-8080-exec-3] INFO - Initializing Spring DispatcherServlet 'dispatcherServlet'
connectora  | 2022-03-24T16:01:02,489 [https-jsse-nio-8080-exec-3] INFO - Initializing Servlet 'dispatcherServlet'
connectora  | 2022-03-24T16:01:02,494 [https-jsse-nio-8080-exec-3] INFO - Completed initialization in 4 ms
connectora  | 2022-03-24T16:01:12,457 [https-jsse-nio-8080-exec-10] INFO - Init duration for springdoc-openapi is: 7590 ms
connectora  | 2022-03-24T16:01:43,365 [https-jsse-nio-8080-exec-5] INFO - Successfully received DAT from DAPS.
connectora  | 2022-03-24T16:01:43,800 [https-jsse-nio-8080-exec-5] INFO - Using cached DAPS DAT. [expiration=(2022-03-24T17:01:43.000+0000)]
connectora  | 2022-03-24T16:01:44,058 [https-jsse-nio-8080-exec-5] INFO - Sending request to https://connectora:8080/api/ids/data ...
connectora  | 2022-03-24T16:01:44,346 [https-jsse-nio-8080-exec-5] WARN - The recipient's certificate authority is not trusted. [exception=(PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target)]
connectora  | 2022-03-24T16:01:53,083 [scheduling-1] INFO - Scanning agreements...

[SebastianOpriel]

Hi @aitorce
You have used self-signed certificates, thus you need to add them to the truststore, which is different from the keystore. The truststore is defined in config.json see

DataspaceConnector/src/main/resources/conf/config.json

Line 53 in f854480

"ids:trustStore" : {

the password can be set in application.properties see

DataspaceConnector/src/main/resources/application.properties

Line 82 in f854480

configuration.trustStorePassword=password

You can override all application.properties values by setting them in your compose file under environment. Have a look here for the naming convention: https://hughesadam87.medium.com/how-to-override-spring-properties-with-env-vars-82ee1db2ae78

[aitorcelaya]

Hi @SebastianOpriel,

Thank you for sharing the naming convention, I have adapted the docker-compose.yml to align with that article.

Regarding the configuration, I have found the issue. It does not like that my truststore is called truststore.p12. Once I changed the name to truststore1.p12, everything worked correctly.

[boxer-code]

Hi @aitorce,

I've got the same error as you but didn't manage to fix it yet. Did you add an env variable in your docker-compose.yml to change the name of the truststore in truststore1.p12? Could you post how you changed your compose file to fix the error?
Thanks in advance!

[aitorcelaya]

Hello @boxer-code,
There is no need to change the docker-compose.yml because the truststore is being pulled from the config.json. I changed the truststore's name to truststorea.p12 and changed the config.json to:

  "ids:trustStore" : {
    "@id" : "file:///conf/truststorea.p12"
  },

The docker-compose.yml looks as follows:

version: '3.5'

services:
  connectora:
    image: ghcr.io/international-data-spaces-association/dataspace-connector:7.0.2
    container_name: connectora
    ports:
      - 8080:8080
    networks:
      - default
    volumes:
      - ./dataspaceconnectora/conf:/conf
    environment:
      - CONFIGURATION_PATH=/conf/config.json        
      - DAPS_URL=http://omejdn:4567
      - DAPS_TOKEN_URL=http://omejdn:4567/token    
      - SERVER_SSL_KEY-STORE=/conf/connectorA.p12
    restart: always
  connectorb:
    image: ghcr.io/international-data-spaces-association/dataspace-connector:7.0.2
    container_name: connectorb
    ports:
      - 8081:8081
    networks:
      - default
    volumes:
      - ./dataspaceconnectorb/conf:/conf
    environment:
      - SERVER_PORT=8081
      - CONFIGURATION_PATH=/conf/config.json        
      - DAPS_URL=http://omejdn:4567
      - DAPS_TOKEN_URL=http://omejdn:4567/token    
      - SERVER_SSL_KEY-STORE=/conf/connectorB.p12
    restart: always
           
networks:
  default:
    external:
      name: broker-localhost_default

Hope this helps!

[boxer-code]

Hi @aitorce,

thank you for posting your solution! I fixed it by adding the hostname (tc-core) at the subjectaltnames of the certificate of the trusted-connector and changed the name of the certificate at the keystore in "1".